Skip to content
Degrees of SatoshiFollow the connections.

Degrees of SatoshiWallet libraryAddress dossier

Bitcoin mainnet · Incident record · 2018-2019

On-chain record · medium source confidence

PlusToken BTC Collection Addresses

PlusToken was a China-based investment scheme that operated during 2018 and 2019 and collapsed owing users billions of dollars' worth of cryptocurrency. Researchers who traced its bitcoin identified a set of collection addresses into which deposits were pooled before being layered through mixing services and moved to over-the-counter desks. The GraphSense project republishes that list as an open TagPack under the label 'Plus Token Scam'. All of these addresses have been fully emptied.

Research author: · Group author: · Published 2026-08-06 · Internal review: · Corrections

Bitcoin ancestry star map for PlusToken BTC Collection Addr…, 4 degrees from the first bitcoin 1°2°3°4°SATOSHI201620162019PLUSTOKEN BTC COLLECTIO…1MFgcy…4tRY4° FROM THE FIRST BITCOIN
4 hops from the working origin.
1 of 13 documented addresses
1MFgcyJ7ZNSknbTBRaih6zWDE6V1A64tRY

PlusToken-attributed collection address

Era
2018-2019
Script
P2PKH
First seen
May 2019
Connected
May 2019
Evidence
4 sources
First seen
May 2019
Connected
May 2019
Route display ID
4°-2CD5-5B68Display identifier only — not proof of ownership.
2 additional population comparisons
Same-era contextCloser than 96% of scored addresses first seen in 2019
Connection contextConnected earlier than 36.4% of scored 4° addresses

Evidence boundary

What is — and is not — established

These are scam-collection and laundering addresses identified by researchers - they are not seizure addresses, and no government has published them. GraphSense marks its PlusToken pack with confidence level 'untrusted_transaction', its weakest tier, and cites a single blog as source. Two entries in that TagPack are unusable and were excluded: '14bwh6gmvol5ntwbvxqjkjdtzv4y5ebtvm' appears lowercased in both the blog and the TagPack, which destroys the case-sensitive base58 encoding, and the TagPack's '1MFgcyJ7ZNSknbTBRaih6zWDE6V1A64tRYs' carries a trailing character that fails checksum - the blog's '1MFgcyJ7ZNSknbTBRaih6zWDE6V1A64tRY' is the valid form and is what is listed here. Every address listed passes checksum. Spot-checks against mempool.space confirmed the cited amounts for 3PBN3MCp (12,000.0001 BTC), 33FKcwFh (37,922.91 BTC), 19bMszbo (11,999.97 BTC) and 1LT4ae84 (424.21 BTC); the balance figures quoted in the blog are snapshots from 2019 and do not match lifetime receipts for every entry.

The dossier

Evidence record

Address record

Role
PlusToken-attributed collection address
Script
P2PKH
Category
Incident record
Source confidence
medium
Catalog reviewed
2026-08-06
View all 13 documented addresses
  1. 011MFgcyJ7ZNSknbTBRaih6zWDE6V1A64tRYP2PKH · representative
  2. 023ETAVt2scYBFkBFksuNDk1i5tDLQ2c4zWRP2SH
  3. 033EYsru4LUcN258sENYPu5Py3S5WnqxEcnEP2SH
  4. 043HKs1g7u5a1uU4pC5HaNooYMbL1Lao4mv4P2SH
  5. 053ESakThMrdVVrbhhcpf9spicyjCg1Uk8JmP2SH
  6. 0633LNws16Wfs12usWBNfa1MSX3YKY6HdayfP2SH
  7. 073HwY536CxznDxMjiRCFkpx5ykwJbJMZY4wP2SH
  8. 0835bCzX3RQEWdquqCPQkmdJdu2K4ut1roUZP2SH
  9. 0931owhyALzzPEqUFwRbU5yQR4wNhYEjCiE5P2SH
  10. 103PBN3MCpDcZKr7WdyY1ULq1NeGwLNjpkj7P2SH
  11. 1133FKcwFhFBKWHh46Ksmxs3QBu8HV7h8QdFP2SH
  12. 1219bMszbozeHyjANgSyM9iyjsZU1sKsR6uMP2PKH
  13. 131LT4ae84S8tCsZtrLCcz3Z38DGn1LnZ9opP2PKH

Source ledger

4 cited
  1. boxmining.com/plus-token-ponzi
  2. raw.githubusercontent.com/…/plustoken.yaml
  3. theblock.co/…/over-117m-…resses
  4. chainalysis.com/…/plustoken-…-price
Trace another address